Reports Malwarebytes:
Malwarebytes' Anti-Malware 1.38
Database version: 2322
Windows 6.0.6001 Service Pack 1
6/24/2009 1:18:48 PM
mbam-log-2009-06-24 (13-18-48).txt
Scan type: Quick Scan
Objects scanned: 80970
Time elapsed: 5 minute(s), 1 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
Rooter:
Rooter.exe (v1.0.1) by Eric_71
¨
Microsoft Windows Vista Home Edition (6.0.6001) Service Pack 1
32_bits - x86 Family 6 Model 15 Stepping 13, GenuineIntel
¨
C:\ [Fixed-NTFS] .. ( Total:231 Go - Free:134 Go )
D:\ [Fixed-NTFS] .. ( Total:232 Go - Free:165 Go )
E:\ [CD_Rom]
F:\ [CD_Rom]
G:\ [CD_Rom]
¨
Scan : 13:20.00
Path : C:\Users\Ramon\Desktop\Rooter.exe
User : Ramon ( Administrator -> YES )
¨
----------------------\\ Processes
¨
Locked [System Process] (0)
Locked System (4)
Locked smss.exe (476)
Locked csrss.exe (548)
Locked wininit.exe (604)
Locked csrss.exe (616)
Locked services.exe (648)
Locked winlogon.exe (676)
Locked lsass.exe (692)
Locked lsm.exe (700)
Locked svchost.exe (864)
Locked OmniServ.exe (924)
Locked svchost.exe (992)
Locked svchost.exe (1032)
Locked Ati2evxx.exe (1124)
Locked svchost.exe (1188)
Locked svchost.exe (1252)
Locked svchost.exe (1288)
Locked audiodg.exe (1352)
Locked svchost.exe (1416)
Locked SLsvc.exe (1480)
Locked svchost.exe (1532)
Locked Ati2evxx.exe (1596)
Locked svchost.exe (1676)
Locked spoolsv.exe (236)
Locked taskeng.exe (248)
______ C:\Windows\system32\Dwm.exe (316)
Locked svchost.exe (312)
______ C:\Windows\Explorer.EXE (524)
______ C:\Windows\system32\taskeng.exe (1880)
Locked GoogleUpdate.exe (796)
______ C:\Windows\RtHDVCpl.exe (2124)
______ C:\Program Files\Apoint2K\Apoint.exe (2132)
______ C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe (2144)
______ C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe (2168)
______ C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe (2176)
______ C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe (2236)
______ C:\Program Files\Fujitsu\fjdvrupd\updatenv.exe (2264)
______ C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (2284)
______ C:\Program Files\Fingerprint Sensor\ATSwpNav.exe (2312)
______ C:\Program Files\Java\jre6\bin\jusched.exe (2344)
______ C:\Program Files\DAEMON Tools Lite\daemon.exe (2352)
______ C:\Program Files\DU Meter\DUMeter.exe (2364)
______ C:\Windows\ehome\ehtray.exe (2372)
______ C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (2388)
______ C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (2424)
Locked opvapp.exe (2440)
______ C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE (2536)
______ C:\Windows\ehome\ehmsas.exe (2600)
______ C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (2868)
Locked agrsmsvc.exe (3004)
Locked DUMeterSvc.exe (3044)
Locked ekrn.exe (3140)
Locked o2flash.exe (3296)
Locked svchost.exe (3352)
Locked svchost.exe (3396)
Locked updnvsrv.exe (3456)
Locked svchost.exe (3496)
Locked SearchIndexer.exe (3572)
Locked SDWinSec.exe (3700)
______ C:\Program Files\Windows Media Player\wmpnscfg.exe (1468)
Locked WmiPrvSE.exe (2416)
______ C:\Windows\system32\wbem\unsecapp.exe (2304)
Locked ApMsgFwd.exe (3220)
______ C:\Program Files\Apoint2K\HidFind.exe (3260)
______ C:\Program Files\Apoint2K\Apntex.exe (2292)
______ C:\Windows\system32\wuauclt.exe (5100)
Locked dllhost.exe (6136)
______ C:\Users\Ramon\Desktop\Rooter.exe (3716)
¨
----------------------\\ Device\Harddisk0\
¨
\Device\Harddisk0 [Sectors : 63 x 512 Bytes]
¨
\Device\Harddisk0\Partition1 (Start_Offset:1048576 | Length:1610612736)
\Device\Harddisk0\Partition2 --[ MBR ]-- (Start_Offset:1611661312 | Length:248446451712)
¨
----------------------\\ Scheduled Tasks
¨
C:\Windows\Tasks\GoogleUpdateTaskMachine.job
C:\Windows\Tasks\SA.DAT
C:\Windows\Tasks\SCHEDLGU.TXT
¨
----------------------\\ Registry
¨
¨
----------------------\\ Files & Folders
¨
----------------------\\ Scan completed at 13:20.04
¨
C:\Rooter$\Rooter_2.txt - (24/06/2009 | 13:20.04)
OTL:
OTL logfile created on: 6/24/2009 1:21:16 PM - Run 2
OTL by OldTimer - Version 3.0.5.0 Folder = C:\Users\Ramon\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18783)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.86 Gb Available Physical Memory | 92.83% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 231.38 Gb Total Space | 134.29 Gb Free Space | 58.04% Space Free | Partition Type: NTFS
Drive D: | 232.88 Gb Total Space | 165.86 Gb Free Space | 71.22% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: RAMON-WORK-2
Current User Name: Ramon
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Program Files\Softex\OmniPass\OmniServ.exe (Softex Inc.)
PRC - C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Windows\Explorer.EXE (Microsoft Corporation)
PRC - C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe (FUJITSU LIMITED)
PRC - C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe (FUJITSU LIMITED)
PRC - C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe (FUJITSU LIMITED)
PRC - C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe (FUJITSU LIMITED)
PRC - C:\Program Files\Fujitsu\fjdvrupd\updatenv.exe (FUJITSU LIMITED)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
PRC - C:\Program Files\Fingerprint Sensor\ATSwpNav.exe (AuthenTec, Inc.)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
PRC - C:\Program Files\DU Meter\DUMeter.exe (Hagel Technologies Ltd)
PRC - C:\Windows\ehome\ehtray.exe (Microsoft Corporation)
PRC - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files\Softex\OmniPass\opvapp.exe ()
PRC - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE (Advanced Micro Devices Inc.)
PRC - C:\Windows\ehome\ehmsas.exe (Microsoft Corporation)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)
PRC - C:\Windows\System32\agrsmsvc.exe (Agere Systems)
PRC - C:\Program Files\DU Meter\DUMeterSvc.exe (Hagel Technologies Ltd)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
PRC - C:\Windows\System32\o2flash.exe (O2Micro International)
PRC - C:\Program Files\Fujitsu\fjdvrupd\updnvsrv.exe (FUJITSU LIMITED)
PRC - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
PRC - C:\Windows\System32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation)
PRC - C:\Program Files\Apoint2K\ApMsgFwd.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\Apoint2K\HidFind.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\Apoint2K\Apntex.exe (Alps Electric Co., Ltd.)
PRC - C:\Users\Ramon\Desktop\OTL.exe (OldTimer Tools)
========== Win32 Services (SafeList) ==========
SRV - (AgereModemAudio [Auto | Running]) -- C:\Windows\System32\agrsmsvc.exe (Agere Systems)
SRV - (Ati External Event Utility [Auto | Running]) -- C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (DUMeterSvc [Auto | Running]) -- C:\Program Files\DU Meter\DUMeterSvc.exe (Hagel Technologies Ltd)
SRV - (ehRecvr [On_Demand | Stopped]) -- C:\Windows\ehome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [On_Demand | Stopped]) -- C:\Windows\ehome\ehsched.exe (Microsoft Corporation)
SRV - (ehstart [Auto | Stopped]) -- C:\Windows\ehome\ehstart.dll (Microsoft Corporation)
SRV - (EhttpSrv [On_Demand | Stopped]) -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET)
SRV - (ekrn [Auto | Running]) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
SRV - (Eventlog [Auto | Running]) -- C:\Windows\System32\wevtsvc.dll (Microsoft Corporation)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) -- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (gupdate1c9f3644a018cf2 [Auto | Stopped]) -- C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (gusvc [Disabled | Stopped]) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (hasplms [Disabled | Stopped]) -- C:\Windows\System32\hasplms.exe (Aladdin Knowledge Systems Ltd.)
SRV - (IDriverT [On_Demand | Stopped]) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (idsvc [Unknown | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (MSCSPTISRV [On_Demand | Stopped]) -- C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe (Sony Corporation)
SRV - (NetTcpPortSharing [Disabled | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (O2Flash [Auto | Running]) -- C:\Windows\System32\o2flash.exe (O2Micro International)
SRV - (odserv [On_Demand | Stopped]) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (omniserv [Auto | Running]) -- C:\Program Files\Softex\OmniPass\OmniServ.exe (Softex Inc.)
SRV - (ose [On_Demand | Stopped]) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (PACSPTISVR [On_Demand | Stopped]) -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe ()
SRV - (SBSDWSCService [Auto | Running]) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (SonicStage Back-End Service [On_Demand | Stopped]) -- C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe (Sony Corporation)
SRV - (SPTISRV [On_Demand | Stopped]) -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe (Sony Corporation)
SRV - (SSScsiSV [On_Demand | Stopped]) -- C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe (Sony Corporation)
SRV - (UpdateNaviInstallService [Auto | Running]) -- C:\Program Files\Fujitsu\fjdvrupd\updnvsrv.exe (FUJITSU LIMITED)
SRV - (WinDefend [Auto | Running]) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc [Disabled | Stopped]) -- C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (acedrv11 [Auto | Running]) -- C:\Windows\System32\drivers\acedrv11.sys (Protect Software GmbH)
DRV - (adp94xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (adpahci [Disabled | Stopped]) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (adpu160m [Disabled | Stopped]) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (adpu320 [Disabled | Stopped]) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ADVNTDRV [On_Demand | Stopped]) -- C:\Windows\System32\drivers\ADVNTDRV.SYS (FUJITSU LIMITED.)
DRV - (Afc [On_Demand | Running]) -- C:\Windows\System32\drivers\Afc.sys (Arcsoft, Inc.)
DRV - (AgereSoftModem [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\AGRSM.sys (Agere Systems)
DRV - (aic78xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (aksfridge [Auto | Running]) -- C:\Windows\system32\drivers\aksfridge.sys (Aladdin Knowledge Systems Ltd.)
DRV - (aliide [Disabled | Stopped]) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (ApfiltrService [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (arc [Disabled | Stopped]) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (arcsas [Disabled | Stopped]) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (athr [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\athr.sys (Atheros Communications, Inc.)
DRV - (atikmdag [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV - (atksgt [Auto | Running]) -- C:\Windows\System32\DRIVERS\atksgt.sys ()
DRV - (ATSWPDRV [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\ATSwpDrv.sys (AuthenTec, Inc.)
DRV - (BrFiltLo [On_Demand | Stopped]) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp [On_Demand | Stopped]) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (Brserid [Disabled | Stopped]) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrSerWdm [Disabled | Stopped]) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm [Disabled | Stopped]) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer [On_Demand | Stopped]) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (cmdide [Disabled | Stopped]) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (E1G60 [On_Demand | Stopped]) -- C:\Windows\System32\DRIVERS\E1G60I32.sys (Intel Corporation)
DRV - (eamon [Auto | Running]) -- C:\Windows\System32\DRIVERS\eamon.sys (ESET)
DRV - (ehdrv [System | Running]) -- C:\Windows\System32\DRIVERS\ehdrv.sys (ESET)
DRV - (elxstor [Disabled | Stopped]) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (epfwwfpr [Auto | Running]) -- C:\Windows\System32\DRIVERS\epfwwfpr.sys (ESET)
DRV - (FBIOSDRV [Boot | Running]) -- C:\Windows\system32\drivers\FBIOSDRV.SYS (FUJITSU LIMITED)
DRV - (FJVBCtrl [Auto | Running]) -- C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\FJVBCtrl.sys (FUJITSU LIMITED)
DRV - (FUJ02B1 [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\FUJ02B1.sys (FUJITSU LIMITED)
DRV - (FUJ02E3 [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\FUJ02E3.sys (FUJITSU LIMITED)
DRV - (Hardlock [Auto | Running]) -- C:\Windows\system32\drivers\hardlock.sys (Aladdin Knowledge Systems Ltd.)
DRV - (HpCISSs [Disabled | Stopped]) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (ialm [On_Demand | Stopped]) -- C:\Windows\System32\DRIVERS\igdkmd32.sys (Intel Corporation)
DRV - (iaStor [Boot | Running]) -- C:\Windows\system32\DRIVERS\iaStor.sys (Intel Corporation)
DRV - (iaStorV [Disabled | Stopped]) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (iirsp [Disabled | Stopped]) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (IntcAzAudAddService [On_Demand | Running]) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (iteatapi [Disabled | Stopped]) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (iteraid [Disabled | Stopped]) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (lirsgt [Auto | Running]) -- C:\Windows\System32\DRIVERS\lirsgt.sys ()
DRV - (LSI_FC [Disabled | Stopped]) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (LSI_SAS [Disabled | Stopped]) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (LSI_SCSI [Disabled | Stopped]) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (megasas [Disabled | Stopped]) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (Mraid35x [Disabled | Stopped]) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (NETMDUSB [On_Demand | Stopped]) -- C:\Windows\System32\Drivers\NETMDUSB.sys (Sony Corporation)
DRV - (nfrd960 [Disabled | Stopped]) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (ntrigdigi [Disabled | Stopped]) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (nvraid [Disabled | Stopped]) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nvstor [Disabled | Stopped]) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (O2MDRDR [Boot | Running]) -- C:\Windows\system32\DRIVERS\o2media.sys (O2Micro )
DRV - (O2SDRDR [Boot | Running]) -- C:\Windows\system32\DRIVERS\o2sd.sys (O2Micro )
DRV - (pavboot [Boot | Running]) -- C:\Windows\system32\drivers\pavboot.sys (Panda Security, S.L.)
DRV - (PxHelp20 [Boot | Running]) -- C:\Windows\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (ql2300 [Disabled | Stopped]) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (ql40xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (RTHDMIAzAudService [On_Demand | Running]) -- C:\Windows\System32\drivers\RtHDMIV.sys (Realtek Semiconductor Corp.)
DRV - (SASDIFSV [System | Running]) -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASENUM [On_Demand | Running]) -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL [System | Running]) -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (secdrv [Auto | Running]) -- C:\Windows\System32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (ser2plms [On_Demand | Stopped]) -- C:\Windows\System32\DRIVERS\ser2plms.sys (Prolific Technology Inc.)
DRV - (SiSRaid2 [Disabled | Stopped]) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (SiSRaid4 [Disabled | Stopped]) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (sptd [Boot | Running]) -- C:\Windows\System32\Drivers\sptd.sys ()
DRV - (Symc8xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_hi [Disabled | Stopped]) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Sym_u3 [Disabled | Stopped]) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (uliahci [Disabled | Stopped]) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (UlSata [Disabled | Stopped]) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (ulsata2 [Disabled | Stopped]) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (USBAVCap [On_Demand | Stopped]) -- C:\Windows\System32\drivers\USBAVCap.sys (AVerMedia TECHNOLOGIES, Inc.)
DRV - (viaide [Disabled | Stopped]) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (VirtualFD [On_Demand | Stopped]) -- C:\Downloads\Media\vfd21-080206\vfd.sys (Ken Kato)
DRV - (vsmraid [Disabled | Stopped]) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (yukonwlh [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\yk60x86.sys (Marvell)
DRV - ({95808DC4-FA4A-4C74-92FE-5B863F82066B} [Auto | Running]) -- C:\Program Files\CyberLink\PowerDVD\000.fcl (CyberLink Corp.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.computers.us.fujitsu.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...amp;ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://my.earthlink.net/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/03/06 23:20:50 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
O1 HOSTS File: (761 bytes) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No CLSID value found.
O2 - BHO: (Advertising Cookie Opt-out) - {8E425EB4-ADBD-4816-B1E8-49BB9DECF034} - C:\Program Files\Google\Advertising Cookie Opt-out\opt_out.dll (Google Inc)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [ATSwpNav] C:\Program Files\Fingerprint Sensor\ATSwpNav.exe (AuthenTec, Inc.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [FJUPDNV_Chitose] C:\Program Files\Fujitsu\fjdvrupd\updatenv.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [LoadFUJ02E3] C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [LoadFujitsuQuickTouch] C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Skytel] C:\Windows\Skytel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TvOutSwitch] C:\Program Files\Fujitsu\DispSwitch\DispSwitchLauncher.exe (FUJITSU LIMITED)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKCU..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe (Hagel Technologies Ltd)
O4 - HKCU..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe (Microsoft Corporation)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\NLAapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\napinsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.micr...heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} http://acs.pandasoft...s/as2stubie.cab (ActiveScan 2.0 Installer Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.ma...r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {C237A80A-4C55-4C68-BAA9-CBE4408D12B2} http://download.sp.f.../fslauncher.cab (F-Secure Online Scanner 4.0 Launcher)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_14)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 00,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{00f35bc3-21f7-11de-92ec-001742bf2067}\Shell\AutoRun\command - "" = H:\InstallSeagateManager.exe -- File not found
O33 - MountPoints2\{eebc4b57-4bad-11de-8e54-001742bf2067}\Shell - "" = AutoRun
O33 - MountPoints2\{eebc4b57-4bad-11de-8e54-001742bf2067}\Shell\AutoRun\command - "" = F:\Launcher.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
========== Files/Folders - Created Within 30 Days ==========
[2009/06/22 19:08:31 | 00,512,512 | ---- | C] (OldTimer Tools) -- C:\Users\Ramon\Desktop\OTL.exe
[2009/06/22 19:02:34 | 00,000,000 | ---D | C] -- C:\Rooter$
[2009/06/22 19:02:14 | 00,170,711 | ---- | C] (Eric_71) -- C:\Users\Ramon\Desktop\Rooter.exe
[2009/06/22 15:15:27 | 00,000,000 | ---D | C] -- C:\Users\Ramon\Desktop\Reports_Logs
[2009/06/22 14:29:23 | 00,001,015 | ---- | C] () -- C:\Users\Ramon\Desktop\Spybot - Search & Destroy.lnk
[2009/06/22 14:07:22 | 00,000,880 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachine.job
[2009/06/22 13:48:12 | 01,891,719 | -H-- | C] () -- C:\Users\Ramon\AppData\Local\IconCache.db
[2009/06/21 12:50:32 | 00,001,834 | ---- | C] () -- C:\Users\Ramon\Desktop\HijackThis.lnk
[2009/06/21 12:50:32 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009/06/20 23:06:30 | 00,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2009/06/20 23:06:21 | 00,000,862 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2009/06/20 23:06:20 | 00,000,000 | ---D | C] -- C:\Users\Ramon\AppData\Roaming\SUPERAntiSpyware.com
[2009/06/20 23:06:20 | 00,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2009/06/20 23:05:33 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2009/06/20 11:54:36 | 00,028,544 | ---- | C] (Panda Security, S.L.) -- C:\Windows\System32\drivers\pavboot.sys
[2009/06/20 11:54:33 | 00,000,000 | ---D | C] -- C:\Program Files\Panda Security
[2009/06/20 00:10:33 | 00,000,000 | ---D | C] -- C:\Users\Ramon\AppData\Roaming\Malwarebytes
[2009/06/20 00:10:31 | 00,000,778 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/06/20 00:10:29 | 00,038,160 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/06/20 00:10:28 | 00,019,096 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2009/06/20 00:10:28 | 00,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2009/06/20 00:10:27 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009/06/19 23:58:09 | 00,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2009/06/19 23:58:09 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2009/06/19 23:50:53 | 00,001,630 | ---- | C] () -- C:\Users\Ramon\Desktop\CCleaner.lnk
[2009/06/19 23:50:53 | 00,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2009/06/19 21:11:10 | 02,033,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2009/06/19 21:11:08 | 00,784,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
[2009/06/19 21:11:06 | 00,636,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localspl.dll
[2009/06/19 21:11:05 | 05,936,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll
[2009/06/19 21:11:04 | 11,064,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
[2009/06/19 21:11:04 | 01,985,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
[2009/06/19 21:11:04 | 01,207,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
[2009/06/19 21:11:04 | 00,915,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
[2009/06/19 21:11:04 | 00,385,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2009/06/19 21:11:03 | 01,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2009/06/19 21:11:03 | 01,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2009/06/19 21:11:03 | 00,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2009/06/19 21:11:03 | 00,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2009/06/19 21:11:03 | 00,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2009/06/19 21:11:03 | 00,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2009/06/19 21:11:03 | 00,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2009/06/19 19:09:12 | 00,000,000 | ---- | C] () -- C:\ProgramData\93795576.ini
[2009/06/17 14:32:23 | 00,586,240 | ---- | C] (Aladdin Knowledge Systems Ltd.) -- C:\Windows\System32\drivers\hardlock.sys
[2009/06/17 14:32:22 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Aladdin Shared
[2009/06/17 14:32:10 | 02,558,464 | ---- | C] (Aladdin Knowledge Systems Ltd.) -- C:\Windows\System32\hasplms.exe
[2009/06/17 14:31:59 | 02,558,464 | ---- | C] (Aladdin Knowledge Systems Ltd.) -- C:\Windows\System32\aksllmtp.exe
[2009/06/17 14:31:46 | 00,350,720 | ---- | C] (Aladdin Knowledge Systems Ltd.) -- C:\Windows\System32\drivers\aksfridge.sys
[2009/06/17 14:31:20 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\ALLDATA Shared
[2009/06/17 14:31:17 | 00,327,680 | ---- | C] (Aladdin Knowledge Systems) -- C:\Windows\System32\haspms32.dll
[2009/06/17 14:31:17 | 00,001,193 | ---- | C] () -- C:\Users\Public\Desktop\ALLDATA Repair.lnk
[2009/06/17 14:31:16 | 00,000,000 | ---D | C] -- C:\ALLDATAW
[2009/06/15 03:40:45 | 00,000,000 | ---D | C] -- C:\Users\Ramon\Desktop\Houston_Agilent
[2009/06/12 22:35:28 | 00,002,973 | ---- | C] () -- C:\Users\Ramon\Documents\ Sun Suites of Westchase.htm
[2009/06/12 22:35:28 | 00,000,000 | ---D | C] -- C:\Users\Ramon\Documents\ Sun Suites of Westchase_files
[2009/06/12 22:33:00 | 00,003,011 | ---- | C] () -- C:\Users\Ramon\Documents\201 Heights Blvd, Houston, TX 77007 to Sun Suites of Westchase.htm
[2009/06/12 22:33:00 | 00,000,000 | ---D | C] -- C:\Users\Ramon\Documents\201 Heights Blvd, Houston, TX 77007 to Sun Suites of Westchase_files
[2009/06/09 01:27:25 | 00,000,000 | ---D | C] -- C:\Users\Ramon\AppData\Roaming\FileZilla
[2009/06/09 01:27:12 | 00,001,709 | ---- | C] () -- C:\Users\Public\Desktop\FileZilla Client.lnk
[2009/06/09 01:27:09 | 00,000,000 | ---D | C] -- C:\Program Files\FileZilla Client
[2009/06/08 13:38:50 | 00,000,000 | ---D | C] -- C:\Users\Ramon\Desktop\Houston
[2009/06/07 21:40:03 | 00,000,810 | ---- | C] () -- C:\Users\Ramon\Desktop\vfdwin.exe - Shortcut.lnk
[2009/06/06 00:34:33 | 00,002,501 | ---- | C] () -- C:\Users\Ramon\Desktop\Microsoft Streets & Trips 2009.lnk
[2009/06/06 00:20:16 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Streets & Trips 2009
[2009/06/06 00:18:04 | 00,000,000 | ---D | C] -- C:\Program Files\MSECache
[2009/06/04 21:23:18 | 00,000,000 | ---D | C] -- C:\Users\Ramon\Documents\Art of Murder - The Hunt for the Puppeteer
[2009/06/04 21:20:52 | 00,002,121 | ---- | C] () -- C:\Users\Ramon\Desktop\Art of Murder - The Hunt for the Puppeteer.lnk
[2009/06/04 21:18:50 | 00,000,000 | ---D | C] -- C:\Program Files\City Interactive
[2009/06/04 20:39:26 | 00,000,000 | ---D | C] -- C:\Users\Ramon\Desktop\MajongMaster
[2009/06/01 21:32:45 | 00,000,000 | ---D | C] -- C:\ProgramData\SonicStage
[2009/06/01 20:58:25 | 00,001,718 | ---- | C] () -- C:\Users\Public\Desktop\SonicStage.lnk
[2009/06/01 20:58:24 | 00,770,048 | ---- | C] (Gracenote) -- C:\Windows\System32\CDDBUISony.dll
[2009/06/01 20:58:24 | 00,655,360 | ---- | C] (Gracenote, Inc.) -- C:\Windows\System32\CDDBControlSony.dll
[2009/06/01 20:58:24 | 00,589,824 | ---- | C] (Gracenote) -- C:\Windows\System32\CddbMusicIDSony.dll
[2009/06/01 20:58:24 | 00,532,480 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Sony.dll
[2009/06/01 20:58:24 | 00,073,728 | ---- | C] (Gracenote) -- C:\Windows\System32\CddbLinkSony.dll
[2009/06/01 20:57:00 | 00,000,000 | ---D | C] -- C:\Windows\System32\Iosubsys
[2009/06/01 11:19:20 | 00,000,000 | ---D | C] -- C:\ss43_dl
[2009/06/01 11:01:00 | 00,000,000 | ---D | C] -- C:\Users\Ramon\AppData\Roaming\Sony Corporation
[2009/06/01 10:52:13 | 00,001,567 | ---- | C] () -- C:\Users\Public\Desktop\Net MD Simple Burner.lnk
[2009/06/01 10:49:14 | 00,323,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVCORER.DLL
[2009/06/01 10:49:14 | 00,262,416 | ---- | C] () -- C:\Windows\System32\ASFV2.DLL
[2009/06/01 10:48:29 | 00,000,000 | ---D | C] -- C:\ProgramData\Sony Corporation
[2009/06/01 10:30:09 | 00,000,180 | ---- | C] () -- C:\Users\Public\Desktop\Net MD Registration.url
[2009/06/01 10:30:09 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Sony Shared
[2009/06/01 10:26:30 | 00,000,000 | ---D | C] -- C:\Program Files\Sony
[2009/05/28 18:17:09 | 00,001,542 | ---- | C] () -- C:\Users\Ramon\Desktop\OnDemand5.lnk
[2009/05/28 17:56:19 | 00,000,048 | ---- | C] () -- C:\Windows\PickList.ini
[2009/05/28 17:56:04 | 00,002,053 | ---- | C] () -- C:\Windows\od5.ini
[2009/05/28 17:56:03 | 00,001,518 | ---- | C] () -- C:\Users\Public\Desktop\OnDemand5.lnk
[2009/05/28 17:55:39 | 00,000,000 | ---D | C] -- C:\Windows\System32\Adobe
[2009/05/28 17:55:12 | 00,074,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrclr40.dll
[2009/05/28 17:55:10 | 00,028,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrecr40.dll
[2009/05/28 17:55:09 | 00,344,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msexch35.dll
[2009/05/28 17:55:09 | 00,171,967 | ---- | C] () -- C:\Windows\System32\Odbcjet.hlp
[2009/05/28 17:55:09 | 00,007,348 | ---- | C] () -- C:\Windows\System32\Odbcjet.cnt
[2009/05/28 17:55:08 | 01,238,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjt4jlt.dll
[2009/05/28 17:55:07 | 00,044,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrpfs35.dll
[2009/05/28 17:55:07 | 00,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\JETCOMP.exe
[2009/05/28 17:55:02 | 00,000,000 | ---D | C] -- C:\Mitchell1
[2009/05/28 03:01:19 | 00,000,000 | ---D | C] -- C:\ProgramData\{92E7A367-8E12-4830-AA70-29C32E331A81}
[2009/05/27 20:41:14 | 00,000,000 | ---D | C] -- C:\ProgramData\ValuSoft
[2009/05/27 20:40:58 | 00,001,863 | ---- | C] () -- C:\Users\Public\Desktop\Mahjongg Investigations.lnk
[2009/05/27 20:39:42 | 00,000,000 | ---D | C] -- C:\Program Files\Mahjongg Investigations
[2009/05/27 11:40:22 | 00,000,000 | ---D | C] -- C:\Program Files\True Sword 5
[2009/05/25 14:46:19 | 00,048,128 | ---- | C] () -- C:\apnet.exe
[2009/05/23 09:50:31 | 00,000,150 | ---- | C] () -- C:\Windows\DME32.INI
[2009/05/23 09:50:27 | 00,002,732 | ---- | C] () -- C:\Windows\Fcad5LT.ini
[2009/05/23 09:50:27 | 00,000,652 | ---- | C] () -- C:\Windows\FXCONT.INI
[2009/04/28 05:28:14 | 00,129,024 | ---- | C] () -- C:\Windows\System32\AVERM.dll
[2009/04/28 05:28:14 | 00,028,672 | ---- | C] () -- C:\Windows\System32\AVEQT.dll
[2009/04/13 01:01:10 | 00,278,728 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2009/04/13 01:01:08 | 00,025,416 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2009/03/30 14:48:06 | 00,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2009/03/17 21:52:32 | 00,000,041 | ---- | C] () -- C:\Windows\FindServ.INI
[2009/03/07 18:21:35 | 00,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2009/03/07 18:20:12 | 00,000,079 | ---- | C] () -- C:\Windows\EPSCX7400.ini
[2009/03/04 22:18:19 | 00,000,040 | ---- | C] () -- C:\Windows\Topo4.ini
[2007/11/21 13:16:06 | 00,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2007/11/21 13:15:48 | 00,002,088 | ---- | C] () -- C:\Windows\System32\FJSaver.ini
[2006/11/02 08:35:32 | 00,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:25:21 | 00,061,440 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll
[2006/11/02 06:23:31 | 00,000,324 | ---- | C] () -- C:\Windows\win.ini
[2006/11/02 06:23:31 | 00,000,219 | ---- | C] () -- C:\Windows\system.ini
[2006/11/02 03:40:29 | 00,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
========== Files - Modified Within 30 Days ==========
[2009/06/24 13:10:54 | 00,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/06/24 13:10:54 | 00,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/06/24 11:30:32 | 00,000,880 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachine.job
[2009/06/24 01:10:56 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2009/06/24 01:10:46 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2009/06/24 01:08:41 | 01,891,719 | -H-- | M] () -- C:\Users\Ramon\AppData\Local\IconCache.db
[2009/06/23 23:14:42 | 00,002,501 | ---- | M] () -- C:\Users\Ramon\Desktop\Microsoft Streets & Trips 2009.lnk
[2009/06/23 13:23:01 | 00,098,304 | ---- | M] () -- C:\Users\Ramon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/06/23 12:48:15 | 00,690,960 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2009/06/23 12:48:15 | 00,595,684 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2009/06/23 12:48:15 | 00,101,350 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2009/06/22 19:08:40 | 00,512,512 | ---- | M] (OldTimer Tools) -- C:\Users\Ramon\Desktop\OTL.exe
[2009/06/22 19:02:14 | 00,170,711 | ---- | M] (Eric_71) -- C:\Users\Ramon\Desktop\Rooter.exe
[2009/06/22 14:29:23 | 00,001,015 | ---- | M] () -- C:\Users\Ramon\Desktop\Spybot - Search & Destroy.lnk
[2009/06/21 12:50:32 | 00,001,834 | ---- | M] () -- C:\Users\Ramon\Desktop\HijackThis.lnk
[2009/06/20 23:06:21 | 00,000,862 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2009/06/20 00:10:31 | 00,000,778 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/06/19 23:50:53 | 00,001,630 | ---- | M] () -- C:\Users\Ramon\Desktop\CCleaner.lnk
[2009/06/19 21:15:48 | 00,373,584 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/06/19 19:09:12 | 00,000,000 | ---- | M] () -- C:\ProgramData\93795576.ini
[2009/06/18 01:32:28 | 00,000,712 | ---- | M] () -- C:\Users\Public\Desktop\SolSuite.lnk
[2009/06/17 14:31:17 | 00,001,193 | ---- | M] () -- C:\Users\Public\Desktop\ALLDATA Repair.lnk
[2009/06/17 11:27:56 | 00,038,160 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/06/17 11:27:44 | 00,019,096 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2009/06/12 22:35:29 | 00,002,973 | ---- | M] () -- C:\Users\Ramon\Documents\ Sun Suites of Westchase.htm
[2009/06/12 22:33:01 | 00,003,011 | ---- | M] () -- C:\Users\Ramon\Documents\201 Heights Blvd, Houston, TX 77007 to Sun Suites of Westchase.htm
[2009/06/09 01:27:12 | 00,001,709 | ---- | M] () -- C:\Users\Public\Desktop\FileZilla Client.lnk
[2009/06/07 21:40:03 | 00,000,810 | ---- | M] () -- C:\Users\Ramon\Desktop\vfdwin.exe - Shortcut.lnk
[2009/06/04 21:20:52 | 00,002,121 | ---- | M] () -- C:\Users\Ramon\Desktop\Art of Murder - The Hunt for the Puppeteer.lnk
[2009/06/01 20:58:25 | 00,001,718 | ---- | M] () -- C:\Users\Public\Desktop\SonicStage.lnk
[2009/06/01 12:51:12 | 23,635,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mrt.exe
[2009/06/01 10:52:13 | 00,001,567 | ---- | M] () -- C:\Users\Public\Desktop\Net MD Simple Burner.lnk
[2009/06/01 10:51:29 | 00,000,180 | ---- | M] () -- C:\Users\Public\Desktop\Net MD Registration.url
[2009/05/28 18:13:57 | 00,002,053 | ---- | M] () -- C:\Windows\od5.ini
[2009/05/28 17:56:19 | 00,000,048 | ---- | M] () -- C:\Windows\PickList.ini
[2009/05/28 17:56:03 | 00,001,542 | ---- | M] () -- C:\Users\Ramon\Desktop\OnDemand5.lnk
[2009/05/28 17:56:03 | 00,001,518 | ---- | M] () -- C:\Users\Public\Desktop\OnDemand5.lnk
[2009/05/28 15:16:18 | 00,100,416 | ---- | M] () -- C:\Users\Ramon\AppData\Local\GDIPFONTCACHEV1.DAT
[2009/05/27 20:40:58 | 00,001,863 | ---- | M] () -- C:\Users\Public\Desktop\Mahjongg Investigations.lnk
[2009/05/25 14:46:19 | 00,048,128 | ---- | M] () -- C:\apnet.exe
< End of report >
Thank you, Ramon.
Sign In
Create Account
